CVE-2021-38429: Objectcomputing Opendds

Critical severity, CVSS 9.1. EPSS: 1.5% chance of exploitation in the next 30 days.

OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, which may result in a denial-of-service condition and information exposure.

Affected products

• Objectcomputing Opendds: before 3.18.1 (fixed in 3.18.1)

Published 2022-05-05. Last modified 2026-06-17.